first, IMHO you should upgrade your snort distribution. (eg 1.9.0
http://www.snort.org/dl/snort-1.9.0.tar.gz)
actually its pretty sel explanatory what this is, ICMP _destination
unreachable_. Alot of things could cause this.
I usally get these messages from my ISP's router.

Ian Hunter wrote:

>I'm running snort-1.8.4-3 on SuSE 8.0, and I'm getting TONS of messages that
>look like:
>
>Oct 18 14:38:19 lucy snort: [1:485:2] ICMP Destination Unreachable
>(Communication Administratively Prohibited) [Classification: Misc activity]
>[Priority: 3]: {ICMP} 130.59.33.17 -> 192.168.1.20
>
>The FAQ says ignore it unless there are lots, and if there are lots, figure
>out where they're coming from. ???
>
>What causes this?
>
>Thanks!
>
>
>
>

-- 
The secret to success is to start from scratch and keep on scratching.
-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]